by Kastro
Paper/Archive/CVE-2025-34187

CVE-2025-34187

Ilevia Srl. EVE X1/X5 Server — Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

EPSS 3%public exploitCVSS 9.3
critical.is priorityof 100
56
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 88.4.884 × 2017.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads. Execution with sudo grants full root access, resulting in remote privilege escalation and potential system compromise.

Affected

ProductAffectedFixed inSource
EVE X1/X5 Server≤ 4.7.18.0.eden (Logic version: 6.00)–CNA

Scores by source

VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refilevia.comexploitzeroscience.mk/en/vulnerabilities/ZSL-2025-5959.phpexploitpacketstorm.news/files/id/209226writeupvulncheck.com/advisories/ilevia-eve-x1-x5-server-reverse-rootshell